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wmm & itfifi- 6 + ra ^ ^ ^ *shi f t Rows & t , 

*HU^^^*Shift Row«»@B^tt*SA*SixByte 
Suba»£HtT"rSByte Sub^&[n]& t , ^ISJU^X* 
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191*1*1} te^m^bffijznmmyvvt&izttisi- 

St'y h&Olt&(7) Round KeyfcfeSU At}?-? t 
MfERound KeyO^^^lOcb^te^^^g^^ 
1-£EX0R&g£l5£ v Byte Sub^&, Shift Row£& N Mix 
Column£&. Round Keying tfRound#lJi£tS&[e} 
^fTi-^Round^a5^^ilx5 7 ^ F7r>^>3 
vaSI-i: ^ A^X~^<bHifi2Round KeylC X Z>V§^{t/ 

iftf£Round&5lgfl# x A^^-^^mrfS^yn^^fi 
£ 9 fc/h $ ^Hff:/ d y * 5^ 1 ir u * * 

MIBUff^o jx^fittJctflflBRound KeyCOffi&A;f? 
^-^fcftlJM-SIBl Round Key^pglH]^^. IftlEJB 1 R 
ound Key*n»@K^ffi^*-^WJw»|ft-t-6i: t tliW 
fe^^n J: ashift RowRft^Uffi-S + IB 

i^***shift Row«»is]»£, «ris*rau^^^*s 

hift Row^lftlHlKottdSfl&IEllff^oy^SatA** 
ixByte SubgEftSrHfT-r^Byte Sub«»l§lfc , 
IflU^^jHtShift Row£«®tt<0ttj&SffiKHfT:/n y 
^^ICA^ftMERound Key^tt^BftEUff^n y 
*ftW-*lWl-£*2Round ieyDm\E\®b, MIES 2 R 
ound KeyflPglHj&^tt^KfrLTMix Coluran^&£^fT 
-fSMix Column^&[H]&<b, MIB* Hr *\ *R8U- 
v>X**Shift Row^&E&g. Byte Sub'£&@gg, Mix C 
olumn3E*|518S^tU*W5 *>^1"tL*M oSrMSE»2Rou 
nd Key*DK@B^ttJ^i--6» 2 ir ? t %{M?tZ> Z t 

[If #31 2] MlEByte Sub^t&lUS&li, A^^-^i^^ 

[»*«3] liMB*rau^**3fcShift Row^&leJ&lc 
«rlB*ra^v^^^JlcShift RowKMlElHtrRt^b&tt^- 

[8R#«4] iftlEMix Coluran^&ESStt, fH&@£^?£ 
SEXORHIK ^gStCA^^iX^X-^ fc# 
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h J UT 5 ir u ^ * t . 
Byte^^lHl8S^ N 

Hfff2®6ir l"? tomtit fftBRot Byte^leJ^O/H^ 
<£>Byte Sub^^^HfT^6Sub Byte*M[E]&& t , 

mmme^t u# *<d m tit ftimsub Byte^s®^^ 

^ ^ * £ , 

MISS l EXomfeoimti t ffiBB 8 -fe u t ? (Dftti t 

*^^T»teW»«Sl«**||fTi-5fS2EX0RlsIB^, 

-7 p 5/ ^offl^i <h <o 5 *>^i" tifrZMVlMzmjjIrZ > 

K^M^d y^ftl-»rt?1--5 try h^OffiScORoun 
d Key£itfriEHfT:/n y ^ ^iC^lg-r -5 fcf > h^^iC^ 

^ mztitzfclzmt LX£f&1-Z&*:mx J !ri?x.-;i>m& 
Sr*Tl-6SI** l - 4 *n^1" Jx^lcffi«(0i*-§-lElK o 

[0 0 0 1 ] 

D y^Bt-^-AES (Advanced Encryption Standard) «t t 
T«flift$ixoofc6Rijndaeir/U^y XASt/n- K ^ 

[0 0 0 2 ] 

a 0 #{^. ^«tt, fiA^liE^@6^t IT, x^~h^ 

[0003] rixeojCffltcio^T, ^f>?^^i 
50 6 0 ^aUB&^rJi, a&cO*ll«iflr-*)-5DES(C«:to6 
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&t±ft<0&ii^:/p y ^Bf^AES (Advanced Encryptio 
n Standard) <b LT, Ri jndael t #ZtftlZ>$$-%T 
»XJ»&m%iStl, &mt£tl£o t LX^£ (AESK 
77 h http://csrc.nist.g0v/publicati0ns/drafts/d 
fips-AES.pdf#^) 0 
[0 0 0 4] AESIi&Jiyn y*&\2B\?y Y<0^fu v $ 

Si 0-e««Six6it*IslB^J: *)ll«,*rffiT-*>S£# 
x^ixdo 7")>K77>^^3ySli20li, A;fcx- 

*«tO*teWttJlft«*SrfT5EX0R«! J Stt2 2 <bRoun 
dAQ.3ia2 3, §^Round^3iaS2 4 *3 J: tti*7*-* & 
-«F»*-T6tti*U^^^ 2 5*»e>fcS 0 
[0 0 0 5] Round&Jlgfl 2 3 te x Byte Sub^&gfl 3 
1. Shift Row^&g|5 3 2 . Mix Column^&gi$3 3*3 J; 

Round Key*Dggfl3 4^<b& 9 s ^^Round^SS 2 4 
flRound&Jlgfl 2 3^^Mix Coluran^&g|5 3 3*Bfc^fc 
®>m*'rt? t<DX\ Byte Sub^&gfl 3 5. Shift Row^ 
6^oJ:t/Round KeyADg£fl3 7 fl> fc»/fi$ii5 0 
[0 0 0 6 ] Round&JlftiK 9 ig LfrfcitS §^Rou 

0l:iAa£jh,S««l::J:9*fcfc;h/C*5*K 

[0 0 0 7] 
[*l] 





Nr 


128brt 


10 


192bit 


12 


256bit 


14 



[0 0 0 8] z<D~tfrb. *fMH£*5^T**t«iRo 

md&m<D\£}%t%llr-\\B\frl\ ^{Cffif&Round&lJl^fT 
9 i><DXfoV s ^aU28bitXM2Round^3i^90££9iI 
Ztls m&&\92bitXtt\mm*) MZtl. S&&aS256bit 

kt£Z> 0 EXOR0&2 2, Round«!fa»2 3*5j:t/ft»Rou 
nd*Qf3l9J2 1 0 X±f&£tlti 

Round Key^A^J$tt5o 

[0 0 0 9] tt^^r^a-zuai Ote, AES K7 7 He 
^£ft6ii£/&*^^---/MCg^^XRound Key££ 
^t6^t$)!), %<DT /ls=? }) XJ*%m 2 \Z7jk-f 0 AE 
SyPy^^<a®&fcKfcfc!K AES Proposalftm (R 
ijndael Specification, http://csrc.nist.gov/encryp 
tion/aes/ri jndael/Ri jndael. pdf) \Z 2 — K £ ^ 

[0010] ^c^9 l oil, B 1 l-^-f £T<o«i6 
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[0011] 4t mii^-TX 5l-««lcJ:0Round 
>»2 0-CftfflSix-6Round Keyte, *#flS*fcH#ft 

^"^a- /Hs]» fcgij d\ Bf I* £ « 

[0012] 2 O g S 3 Cl^-r J; 9 IH, Byte 

Sub'£&&5 1 ^Mix Coluran^&gfl5 2%fti-%^-7v 
"fe y^5 0 £ffr&LXByte Sub^&£Mix Coluron^&tf) 

a 4 i das^/uxy 7 h ^xrikic pu4 ox&m 

-rZJjm (KT* «*«2 -CfcSo 
^ [0 0 13] MW&!j!:CPU4 

JH^ftt&Byte Sub^&£Mix Coluran^&£ = 7*p 1? 
^tSOHt^-K^xTfLL, (fi^AOfSSrC PU4 

oi:M$n/c7'p^7A4 i x&m-rzztxm&M 

[0014] 

S^p y*«***fifcfrr ££«£Lfc»£\ 

-?0 3\ «*«*Six-C^6±X<0«|gS:128bit*flr-C/N- 

K^<0««j5Sffl|Bi/iS 0 ^fc, Byte Sub^^irMi 
x Column«*^«fB^Sr^- K^*TftU, 

[0 0 15] £/c, Round Key^^fiKi" ^ *J * - 

/UgR 1 0 X-l^. / * V \Z-fs<X<DKound Key£&fe^ 6 

fc*#ft^*yfS^«s*Kt4i?, IllK««ds*#</j! 
6 0 Lfc^oX, AQ.3ia««:fiTS-fr-f^[slKa«^fiS 

SdSftlr^J: 9^0K**XRound Key^^^c^n^ r t 

[0016] AES^p y ^#**3l«i-5 

[0017] 

[^^^^^-r6fci^(7)^l5] ^%p^Ic^6^^(hI^ 

iCcOtggctORound Key^^^ct, A^r-^i: Round Key 
50 <D?h<Vl^kZX0m%$:mn-rZ>EX0mW&k. Byte 
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Sub'£&, Shift Row^j^ Mix Column^&, Round Key 

aZ-Z7$>h*-7T>9'>3 >m^£ *) X^-9 <hRo 
und Key[Z£Zm%<k/m^ik&m%&M7tiy?&U 
l-HfT-r^Bt^SSST-fcoT, RoundM3®S35^, AJjx 
-9*9m.rfv y9M£V i^3lfr:/n y9&\z.# 
9 t. HfT^o jy^ftHlCRound Key 
^ffi£A*^-*l;:*Dg-f £SSl Round KeyAD^lElgS 
k. ^lRound Key*H»laIKOffl*S:-ftttJCft|ftr5 
tt>lc^31^Dy^g|ci:-5Shift Row^&£H?T-f 

ixByte Sub£&£HfT-r6ByteSub£&[eJB£> tBl/ 
^**jKtShift Row£ft®i$<Dtej&S5!fT7n y^ftftli 
A*£*tRound KeyOtt*rJtff^oy^*«l^iPl(1-fi 
^2 Round KeymW^fet, % 2 Round KeyflDg[H]B<7)m 
^{C^LTMix Coluran^&£HfT-f 6Mix Column^&te] 
SS^ lltl/^^, +muS****Shift RowI£&Ih] 
ft. Byte Sub^&Eft, Mix Colunm3E»lElB<Offl>3 ^ 5 
*>^ftl^ lo£$g2 Round Key*D»IsIK^U*i-6* 

[0018] :;t% HfT^oy^ftttSOffifBcfcTy h 

P>tC, fe^ttaft&dS 128t'^K 19 2 tf y k 2 
5 6 fc'y h(??H^^f^^t6r <t^T-#6o 
[0 0 19] £fc> Byte Sub^^SSSli, A^T-^lC 

mti-tZms-Zl'? 9 k. fR3±i'9 9frbtiM2tiZ 

7-9\cM^x&mmwznfti-zmm&%uk, mm 
mw^bmt}£ti%T-9\zttLxftmm&%nrrir 

U9 9 k*m7LZ>mtfLk^rZ> n kitXZ 6 0 

[0020] &*iimfimfc&%k*6*\tftm 

[0 0 2 1 ] Sfc, +RBu***JltShift Row£R[b]% 

^imkm^imi^&^x&m^At)i-z>z t\z.± 

*) s *|fflus;;***Shift Row£ftlslK«:lf9ft&tt* 

[0 0 2 2] Mix Column«SI[fi]K»i. 

SEX0R|5|K££iI;L, #*»Sl:A^*n5f-^# 
e>(Ctfi/&-t:#6o :«8§, Mix ColumnXSHslBH, 8 
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t'y h»fl[T-«»ASpjjg4 4o<o*»S^: 4o(©**» 
coai^lcX-Sv^TftteWiassiaKSrllfTl-SEXORIalB 
i«rtt6»m4oi^Si*tt6:l:^-(?t 
5. c 2o^*»*«l»^tBx-*>9i«^{b 

h*»bw*D#tt«:«l»-rs J: 5 1^**1" 5 ^ k fcTS 

[0 0 2 3] Bt^JISrjlffypy^ft^jStfctr 

^lEXORSSSts •>7hU^X^«7!is/^7P5'^ 

y y7yvy7<Dmt>k 

^6ir ^(DtH^^D-r-'>3 ^^-T^Ro 
t Byte#L5lte]B£> % 6 ± U 9 9 <Dmtl kRot Byte&3l 

T'o y^&GDByte Sub^^^HfTi~6Sub Byte^^® 
SS£, *6irU**OfcH*]£Sub Byte«L3l@8S^ffl^A s 

Afizti, \i*irfrfrir>%mR#)fcmj3-rz>m8±is9 
9k, m\Exom^(Dihtikm8±^9 9omt}k\cm 
^xmf&tt&mftm&zmfti-%%2Exom&k, > 

tiM&fc&M&ktezyy -7/7o^c^u, ^2 

EX0RH]fc<Dttl;*j£, B»toS«)7y^7oy^|ll 
gC^tStfy hS<0«S<7)RoundKey£5lff:7n y9 

[0024] ::t\ i/y v\s*J*9\^ 3 2t'yhl 

«:«;*. . m6-t^99{t, y V y?y* y7<DohTfr 
h2®3, 4©i. 681, 88BW7y^7n^ 

[0 0 2 5 ] ^fc, JB7-feu^^^^BlU'^x^*Shif 
t Row^^[5]3S(Oai^)^A^$iX> Sub Byte^lHlB^ 
tii^$:S2ti/^^(:A^t$:i:l;J:^ Sub Byte& 
SlslB^RoundtoaSBWByte Sub^^lHlB k 6 

[0 0 2 6 ] 

[«W<OHtS(0^ffi] (7^K77>^->3^) AE 
S^o ^^ 1 28/1 9 2/2 5 6 t'«> 

50 K »d l 2 8 tTjy bxm ^rik/m^it&'ff 
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und Keyfc£li^f 6«*4rv^-/U«l 0 

a-^fln 0;6^&i&£;ft6Round Key^ffl^TPt^b 

|£3lfp®Su Byte Sub^&fclJl. Shift Row^&flyi. M 
ix Coluran^^^S, Round KeyflD^&Sft <*f <7)#lJi£fT 

[0 0 2 7 ] £ l*J6«ffitt. Z<Oy h'77>? > 

ift RowiEft^s^i^^x 3 2 h\z±z>&m%n?f 

U Shift Row£&&3lXfil 2 8t'7 HCJ:S#L3I£ 
nrr-tZ>h<Dt U ^HIR^os/^IBJ^^-^^XEiStt 

[0 0 2 8] :(07!)> K7r V*5/a >«l::ttU A* 
7-^^-Wt6A^Uy^^ 2 0 1 128t' 

ltu^^ 2 0 2 i:, Wl-feu** 2 0 2C0£b2)j&sio 
OA*«B^i^A^*4x6»2*fe 2 0 3 % 2 ir 

2 0 3^tli^^A^^ix6^1Round Key^PglH] 
& 2 0 4 t . mi Round Keyftl*@K 2 0 4 £ 
fcfiro'&ao*^-* £ LTA^li-^iDgLx-^ir 
* 2 0 5 t % Si Round Key*Pg[e]&§ 2 0 4 (0^^^^ 
t fcK 1 2 8 iTy h»fl[-CShift Row^&& 
«SrHfTi-6+PflUv?^^«Shift Row^^{p)S§2 0 6 
£ N ^Uv^^lfcShift Row^&[e]&2 0 6<Dm& 3 
2t*>> h&ClA^ixByte Sub^^^HfTi- 6Byte Sub 
^&(e]&2 0 7 £ x *Wjl^;***Shift Row^^EB 
2 0 6 tf)fit^3 2 fc'y h&(CA*>£ix6S 2 Round Key 
*PglH]&& 2 0 8 ^ S 2 Round Key*Pg[Hj& 2 0 8 Kit 
***fcfcro'*aD£T--* £ LTA^i-^ADg^-^ 
iTU^^209i:, |2 Round Keyipg®^ 2 0 8 Oft 
^KftLXMix Coluran^&&HfTl-6Mix Coluran^&Iej 

882 i o t zffi7Lx^z> 0 m2±u#* 2 o 3\zn. m 

ltU^^ 2 0 2, Byte Sub^&[a]& 2 0 7, Mix Colu 
mn^&[H]&&2 1 0 *3 <£ tf* ^ X * ^Shi f t Row^& 
®&2 0 6 <7)ffl;^A^£;ft,X*S!K ^©5*>^"f<X*» 

lo£S2Round Key*D@[H]3§2 0 4 ICttJ^-T 6 X 0 \Z 

[0 0 2 9] 

im2] 
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Round 






ofcL_B 


0 


000-003 


RounKeyftJt 


a I 


1 




ByteSubRfll 


b 


UvO 


onJTtKOWjtBt 


c 






MDcuoiumnXS 
RoundKey&Uf 






01 ^-fllfi 




b 


2 


017 


euum^H-,* lit 


c 




U 1 o\Jc I 


Mixuolumn k 91 
RoundKeytOjf 


c 




SB 








#1 


ByteSubS* 


b 


NM 




ShiftRow&gl 


c 




(NM)*9- 
(Nr-1)*^f3 


MixColumnSfcft 
RoundKeylDjI 


c 


Nr 


#2 


ByteSubfctfc 


b 


Nr*9-1 


ShiftRowSifc 






Nr*9- 
Nr*9+3 


RoundKeyJoJH 


d 



#1:(Nr-1)*9-5-(Nr-1)*9-2 
#2:Nr*9-5-Ni*9-2 



(t^fCfiRound KeytMixColumnfl) 

[0 0 3 0] r rt\ Round OXIi. i2tl/^^20 
3<D±\s? ^{ig^ a £ ITil Round Keying HJ& 2 

^ 2 0 2 ICJ: <9 A^U^X* 2 0 lF^^A^Jx-^^3 2 
h^lCii^LXmiRoundKeyJ!lDg[HlB2 0 4 |CA^3 
iiX>$r>?^~/U^?!i^ib A^$ix6Round KeyO 0 h 

Si Round KeyADglElB 2 0 4 (Cj;6*D^^^ 

-f^/U-Cl 2 8 t'y hOKlI^o ^ICttU @ 1 1^*3 

rt^X#6 0 Si Round Key^D^lHl8S2 0 4{Cj:6^ 
^ 3 2 f y hSlC^Bgu^^^^Shift Row$ 

^(eJSS2 0 eicKI&tefc^ifxSo 

[0 0 3 1 ] Round 1 TNi, m 1 (Cfctt ^Roundj^S 2 3 
£Hff1-6 t^Xfe»9 , Byte Sub^&&il3 1, Shift 
Row^^«LM3 2, Mix Coluran^&#lJl3 3. Round Key 
a0g&313 4£HfT-f*o Z<DtzMZ^ ^f, S004f- 
^ /U-S007^-f ^ ;UX\ |2tl/^ 2 0 3 <D± U 
^i'fi^^b^L. +Pflu^^^jftShift Row^^SB 
2 0 6 l;:fe^£tLTt>6x- ? £ 3 2t'7hfo^7h 
^-fr^^^f^^ttJLTByte Sub'£&[ElS& 2 0 7l:A^t 
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^67-^^T<!:t6; t "C\ ^1 Round Key*0g[E]3§ 
2 04^X^ffii:t5o Byte Sub£&[eJ& 2 0 7 \Z 
3 2 t'y hfefc + MUv^^JltShift 
Row«»[a]K2 0 6l::J«&fctt£ft6 0 C^-tlcJ: 
9. 128t'y h^Byte SubK ft&SaSfrfrix, fltgig 
*^ + PflU^^^J(tShift Row£&[e]&2 0 6lC&jia£ 

[0 0 3 2] S008*-f ^/HcfeV^T. Shift Row 

JE»*a*rHfTl-*. +rai'^***Shift Row£&[h] 
&2 0 6XU 1 2 8t'7 h*ffi-CShift Row*&&3! 

fc^T, 128fy h^Shift Row***&Jl*:HfT-*- 
£<, »2-fe 2 0 3 c^ir U^^ttHttt^ 

[0 0 3 3] fgOO^^^/U—SBO^^r^^-ett, Mix 
ColumnSg&tolfc «fc Round KeyADg £ *ff 1 - 5 . 
:r*CH +IBU^^^*tShift RowjE*|p]»2 0 6tc 
»*Snt^5f-^Sr3 2 try hS-frfctf 
fcR^ffl Ltl 2 Round KeyftPS [UK 2 0 8 (CA^-f 

tl5^-^*T*0't1-6r t-C, SB 2 Round KeyrtUgH® 
2 0 8^v^^^i^f5o i2tU^^203 
0)irU**tfcit*:c irt^rtia^ Mix Column^ 
13 ft 2 1 OT-Mix Co\uimmfe&mtimft£frtc'f-?fr 
|2tU^ 2 0 3£^LTffHRound KeyflPg[HJSg2 
0 4{ZAti^tl6 0 *Pgx-*i? 2 0 5CJ; 0)8 

*«*S*RS*tX*5!), Si Round KeyJbP^lHlSS 2 0 4 
K&l^-C Round Key1ffl&to!m&mff£tlZo Mix Column 
^&@8&2 1 0-CMix Column«*toa*tt, % 1 Round 
Key*Pg[e]S§2 0 4 lifc^TRound KeyJnK&Jl* *Lfc« 
3 2 try h&tC*P^ix^X*^Shift Row* 

&0SS2 o 6lc**t«v;'7 h *nft*SfelMftSJx5 0 
i^fclCfclK S009i^^^/U-|B012^>f ^/u-e, Mi 
x Colunn£ft&3fcJ:tfRound KeyflPg&Jl&llff t 
128t'y h«)«Wje**S + PflU^^^*ShiftRowSe» 
[H&2 0 6 fcl*MA$ft5 q Z<D±?\ZLX. g5004lM 
* /U^JBO12"0--f * /WW 9 U->f * ;UT- 1 o£>Round*Q.&# 

[0 0 3 4 ] £XT. ^2Round-gl (Nr- 1 ) RoundlCft 
l^T, % 1 Rounder m&<?)&m& Hffi" 5 (/cifc'L, Nr 
«**»Round&S&£tfRoundte3I<0« 19 £ LBftT-fc 

[0 0 3 5] £ (Nr) Round (ftfcRound) "CIS, Bl 1 Id 
^tt6^^Round^^2 4 ^UtTI - * tWCfc *K Byte 
Sub*j&&3l3 5, Shift Row'g&#LJl3 6. Round Key 
stag 40:13 7 £H'nr-f £<, 

[0 0 3 6 ] Z.<Mtlb\Z^ m (Nr*9~5) -fr-f^/l*- 
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m (Nr*9-2) *-f *>HC*5t*"C* ^2irU^^20 
3 0ir \s**&m%b k U +BBU'^^^J(tShift Row 
£&lH]&2 0 6l:M$tlTl^7-^^3 2 t'y h-f 
0>7 h $-&4*5?>K^fflL-CByte Sub*&te]& 2 0 7 
icA^r^o ftJKx-^-fci"** 2 o 

DI^^6f-^^"0*if6 r £ T\ $1 Round Key 
JOf[5l^2 0 4^-7X^Wi:t5 0 Byte Sub£&08§ 

2 0 7fcJ:S«*tS*tf:, 3 2t'^Sl:tlw^^ 
KtShift Row£»@K2 0 6fc«g&fciirt$;h,<5 0 cor 

70 fcfc* *) , 1 2 8 tr y h^Byte Sub^tfcfllJltffr frft, 
«»»**S*BUv?^^«tShift Row£&038 2 0 6 \Z 

[0 0 3 7 ] % (Nr* 9-1) -fr^f * /MZ*5V * 

T\ 1 2 8 tTy h^Shift Row*&#i5l£: ^frf 5<, - 

S2tu^^2 0 3^ti/^^fiiii^fn^ 

[0 0 3 8] IB (Nr* 9) 1r^^/l— ffi (Nr* 9 + 3) 
♦ ^f^^-ett. Round Keyang&SSrHfTi-So - - T 
fi. *2ti/^^ 2 0 4<D-fei/^^firIS:di:tSri: 
T% +PflU^^^*Shift Row*^lHl^2 0 6lC&*rt£ 

ajltf2tu^^ 2 0 3^^LTSlRound Key^Dg 
0SI2 0 4 liAA-f-So ^PSx-^-ferU-^^ 
2 0 5(a 0il^^tL67 f -^^ii^<r> ? ^~/U^7!i^ 
««$^5«:*«i^i--5ri:-e, SlRound Key*D|?[i] 
B2 0 4l:J:532^*/h feORound Key^P^^S^rll 
fT-t*6r fc#-e#6 0 Sl Round Key^IPglHl^2 0 41: 
*5l^T Round Key*Pa[ftia*nfc«aElS*tt, 3 2 t' y 
30 hfeJC*PflU^^^J(tShift Row*»tElK2 0 6|:^n 

(Nr*9) ii-^^/P-S (Nr*9 + 3) Ro 
und KeyJDS^aSrStffLfc 1 2 8 fc'y KZ)«*iB*3&S 
*P B ^^^^*Shift Row*^lel3§2 0 6\Z#th£tl 
60 r^i^lCtr, 1R (Nr*9-5) *m?/l"*-m 

(Nr*9 + 3) ^/K7) 9ir-T ^/UT-^if^Round^S 

^ a^Htr^n^o z<DkZ<Dnifrx>ris=L-/\,%$t3\z 

[0 0 3 9] 
1^3] 
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Round 


Cycle 


AS 


SELB 


0 


000-003 


RounKeyttlJf 


a 




004 


ShHtRowSlfe 


b 


1 


oos-ooe 


ByteSubfcft 


b 




009-012 


RounKeytDjt 
MuCokimnSft 


c 




013 


ShiftRow£& 


b 


2 


014-017 


ByteSubjtft 


b 




018-021 


RounKeyJcSI 
MixColumnSlft 


a 













(Nr-1)*9-5 


ShtftRowgft 


b 


Nr-1 


#1 


ByteSubgjft 


b 




<NH)*9 - 


RounKeyftlJI 
MxColumnSlft 


o 




Nr*9-5 


ShiftRowJStfc 


b 


Nr 


#2 


ByteSubfcft 


b 




Nr*9- 
Nr*9+3 


RoundKeyJUW 


d 



#1:{Nr-1)*»-«--(Nr-1)*9-1 
#2:Nr*9-4-Nr*9-1 



[0 0 4 0] Round Oflt I2tu^20 

3<D*tUt?&W&a t LTSl Round KeyftPSIelK 2 

o 4\z£*>mxmt>]n&® t m*:mrr-rzo siti/^ 

2 0 2 J: 9 A^3 I^C/X^ 2 0 lf*JGQA2>x-*£3 2 
tTy h^lCl^ltS 1 RoundKey*Dg[H]Sg 2 0 4\ZAt) 
U ft**"^ — /Utt*»?> A*) £ft£Round Key?) 5 

3 2 fc'y K«»C»«$ilfctt*«^P»«iS*:|tfTl- 
3 0 mi± 2 0 2^r^LXA^$ix5 

iSlcA^-rar <h <b1"5 0 r<OJ:5t^ A^x-^fcJ: 

tftt*«*3 2 Y*y h»JCjHEL4*se>, mi Round Ke 
y*D»BB2 0 4lwJ:5*D*«L3l4:3ifTi--5^^-e, ^0 
OOlM^yl^ ^003f--T ^/KD4 ^/UT* 1 2 8 fc* y 

h^M^n y ^KSpH-* Round Key *0g&3l£ llfrf 
6£fc#-C#6. Si Round Key*Dg(Ej8§2 0 4 (C J; 5 
3 2 fcfs/ hfetC + rau^^^^Shift Row 
£&[e]&2 0 6 KJHfcttfllS ft*. 

[0 0 4 1 ] Round 1 Xtt> Shift Row^&, Byte Sub^ 
BL Round Key*0S, Mix Column^&0)HI(;:&Ji£||fT 
t6 0 z<ntzwc, £1\ SOO4-0--T */HC*5t>X, * 
H|U'v***jfcShift Row£»[s]te2 0 6 fcfc^T, 12 
8 hf 5/ MMfcTShift Row«tt«iaS:|ifTi-6o 

£\ *^<b^jc*3»t6shift RowKMMa^mcKads 

fTfrii*. Its &2-t? 9 2 0 3©* £&|Ktt 



(7) ^2 0 0 3- 1 5 5 2 2 

12 

[0 0 4 2] ftlC, fB005^-f^/U-g008^>f ^^-e, 
I2t * 2 0 3^-fc b £ U ^P^^i/ 

**3fcShift Row£&[e]&g2 0 6lC^^ttXt^-r- 
^32 hfoi/7 h$-fr4*se>»*fflL-CByte S 

ub^mie]^2 0 7llA^i-5c *n»r-^-fe 

X\ mi Round Key*D^[El8S2 04^^^ttffitt 
6 C Byte Sud£&[e]&2 0 7 J: 3 2 t' 

y h&iC^Uv^^Shift Row^&[h]3§2 0 6 Clttl 

* J: 3 KByte SubSEfttoaSr jlff-f 5 fc O Xfc 0 , f**fl 
l^^ili-r^o rcor He J: t), 1 2 8 \+y hOByte Sub 

K*«s.a^tT*>*t. »iHg**s+mu^^^*shift ro 

w^|]B2 0 6l;M$ix^ri:^^o 

[0 0 4 3] S009^>f * ^0l2f--r * /I'Xfi, Roun 
d Key*D»fl!!3;fcJ:tfMix Coluran^&&3I£f|fT-f 6, 
dXfl. 4^1 Uv^^lfcShift Row^&[«]S§2 0 6 |C 

*>R*UiLTS2Rouiid Key*0g[E]&&2 0 SKA^-T 
£0 6 0 Jngx-^iru-^ 2 0 9{eJ;9jS$R£ 

ttST'-^Sr^i^^^a-^a^eAASttStt^lit 
t6o |2ti/^ 2 0 3<Dir u^*jiii£c ^ 

LX, Mix ColuninXft[n]K2 1 0 0>U* 2 i? U ^ * 
2 0 3 ^^Lt$ 1 Round Key*0g[el8g 2 0 4 iCA^f 
6o Cco^:^, AD^x-^-t 2 0 5 KJ; 9iliR£ 

tl^r~^Sr*0^i--5Ct^cJ:t), Si Round Key*Dg 

t»aE*ft!fai:*-6 «fc 5»-Mix Coluran^^^S^^fT-T 
6tO-C*>!9, t^^lim^i-6 0 Z<DZk\C£*)^ %2 
30 Round Key^JD@[Hl^2 0 8 M J: 6 Round KeyADg&S <>: Mi 
x Column^^Iel8S2 1 0l^J:6Mix Column^^^S^:^ 
tftfcl 2 8 KO**Jg*dS*PflU^^^J(tShift 

Row^^[e]8S2 o 6l:ft|ft^6o :^<t^i:ix, So 

04f--f ^ ^—^0121^^ ^ /KD 9 i^-T ^ /K* 1 OtDRound 

[0 0 4 4] J£AT. m2Round~m (Nr-1) RoundlC^D 
t^X> mi Rounder ^aoftiaSrllfT-r 6 (fcfcU Nr 
«ft»Round*B31*#tfRoundAafa^*fc t) ig L0ii:X-fe 

^ nxt^e) . 

[0 0 4 5] « (Nr) Round (^^Round) Xlts Shift 
Row^j^^^, Byte Sub^&fll3I, Round Key^JD^^ii^ 
^tT*T6 0 Z<Dtcfr\C^ m (Nr*9-5) ^<itM^& 
l>X, 1 2 8 fc'y h^Shift Row«tt*0fJ14r|lfTi-So 
z<Dk$, ^2t l^^.^ 2 o 3coir u^^te@(i^-fn 

[0 0 4 6] cfe^. m (Nr*9-4) "^-f^/U-S (Nr 
*9-l) i^-f ^ /HC&l^X, m 2ir 2 0 3 oo-lr 
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&2 0 6lw^^nT^6x-^^3 2 \Cy hfO'>7 
h$-fr4^P>»*ffiL-CByteSubS»|HlK2 0 7 KA^ 
1"6o w<o^# x *pgx-*1? u** 2 0 5KJ; 9»R 
^6f-^^Tit6r^T\ mi Round Key*Dg[s] 
K2 0 4^^^^ttfgt-r-5« Byte Sub£&le]& 2 0 7 

t Row£&[I]&2 0 6lc«B&&#i£ft5o w^-^ricj: 
9, 1 2 8 tfy hOByte SubXK»a4SfffcJv 
**S«fBU^^J|Shift Row£&[h]S&2 0 6lC»*ft$ 

[0 0 4 7] £ (Nr*9) (Nr*9 + 3) 

*-f^^-ett. Round KeyiDW«!f31S:llfT-*-*o - - T* 
*4, $2t * 2 0 40iT d tt5i £ 

T\ *fflU^***Shift Row^^(n]SS2 0 6lC*MftS 

2 h 
aiLT^2ir 2 0 3£^LTgHRound Key*Pg 

H1&2 0 4icA^ii-6o *Pgx-*i? * 

2 0 ^SKS^^-***;*^^-/^*^ 
tfc»£*i6*£*«£1-5;i£T-. fllRound KeyApHle] 
S2 0 4ia532t'y h&ORound Key;tJDg&3i£3l 
fr1-$ w £ #T*# 6 C JB 1 Round Key^JDSlBlSS 2 0 41: 
^o^X Round Key*D*&3£ftfc«*l£*tt:, 3 2 t*$/ 

M*fc*Bi^***Shift RowKK(s]K2 0 6 ic-fcix 

(Nr*9) 1f-f*/l^B (Nr*9 + 3) tf-f*/PT % Ro 
und KeyjtaSteSfcUffLfc 1 2 8 t' 7 h 
*Bl^***Shift RowCfftlBlB2 0 6lcfeJA3ft 
6o :^J:^:lt> fB (Nr*9-5) -*4 9>v~-% 

(Nr*9 + 3) *-f ^^W9t^ *^T**»Round&3i 

<+BH^^^«Shift RowXtftlBlB) traffic* 
*5&Shift RowS*Ih1Bo l Xttffl&B 5 [:^r o 
[0 0 4 8] rr-Cfl, 8 tf* h*ffiT-toS^ff 5^7 

7hl^*^^(i, 4O(D7!l'7^7D>y7 P 3 0 2, 3 0 

4, 3 0 6, 3 0 8*S|«*»J«*ix6«ricX*4«J, #7 
!ly^7B^3 0 2, 304, 3 0 6, 3 0 8(^2 
n^tLA^^5iW-t*6-fe l"* * 3 0 1 , 3 0 3, 3 0 

5, 3 0 7j&s&tt£JxT^* 0 1 #@Oir u^* 3 0 1 
Kill, A^x-*IN0<h 7 y y^7P s/^ 3 0 2cDffi^ 

02CA^t5J:9l:M^tiT^5 o 2-4# 
§<DirU^* 3 0 3, 305, 3 0 7 fctt*ft«L(SR 
(O7!) 5 '/7Py7'30 2 p 3 0 4, 3 0 6(Dmt)&± 
0!7P^7P^3 0 4 ( 3 0 6, 3 0 8 <7)fcii ;f> £ # 

AfiZtixte*) ^-ftifr-lf&y V yfyu y?3 o 
4, 3 0 6, 3 0 8fcAflt-6J:5lC«/£3ftT^6o 
[0 0 4 9] 2fS(Ov/7hl/y^^li, 4oi07^^ 
7'7p^312 i 314, 316, 3 1 8 #R|#;&i^ 
ZixZm&X-tj:*) % &y*J y^yu y?3 \ 2, 3 1 
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4, 3 16, 3 1 8lcii*ft«xA**»«1-*-fci'* 
*3 11, 3 13, 3 15, 3 1 7tm&ZtlX^Z 0 
l%U<D-ZUt * 3 1 llwli. A^Jx-^INlt^y y 

zfyuyy*3\ 2<D&j]&£Tfy y yfy* yf 3 1 8 

OttJ^^A^I^nT^ *) ^Ttlfr-jy&y y 7^7 P 7 

/3 l 2 KAMI'S J: 5lc»*sn-C^6, 2- 
4#@tf)-tr * 3 1 3, 3 15, 3 1 7 Icii^rft-eti 
»7yy7'7Py7 P 3 1 2, 314, 316^tH^I 
y y/7 07^3 1 4 , 3 16, 3 18(Otfl^ 
<t 7^5 A*l S ntfc 19 t >i* 7 y^7n^3 

14, 3 16, 3 1 8ICA^t5 J:9lC«f££ftT^ 

[0 0 5 0] 3#@<D>7 h U^X^fi, 4o<D7!)7 
7^7 xi y 7 3 2 2, 324, 326, 3 2 8 #JK*tftR 
5fJl6**t?4*), #7yy^7Py^3 2 2, 3 2 
4, 3 2 6, 3 2 8lClfi^ft^lA*>£iiJR-f61r 
*321, 3 2 3, 3 2 5, 3 2 7^i^T^6 0 
l#@Oir * 3 2 1 left, Xh=r-$ IN2£ 7 y 7 
^7ny^3 2 2^ffi^J:(j57 y 7/7^^3 2 6 

<nmt)&At)£tiX}s*)^-rtifr-J3%y V y?yuy 

7*3 2 2\ZAJj-tZ>± ?\Z&J$.£tlX^Z> 0 2# 
gCOir 3 2 3l:ttia^)7y 7^70^3 2 2 

coffin 7y ^7p^3 2 4o?tti^*3j:t;7y 

7y^7D^3 2 4\Z?<Jj-rZ£l\zmf&£tlX^ 
Z> 0 3#lOtU^^ 3 2 5l:tt«|g^7y^70 5' 

-73 2 4<nmj], y }) y?yv y73 2 6<Dmtils±rf 

y y y^7B^3 2 2<Dffl*ASA/3$ttT*3 5 
^^r7y ^70^3 2 6«cA>3i-5 J:5(-«fi)c 
^tltl^o 4#@^tU^^ 3 2 7lCHM©7!)5' 
7 7^3 2 6 e7)t±J^. 7 U y^y a y~f 3 2 869fct| 
yj*5j:t/7y S//7D «>/3 2 4<0fflaaSA*$Jx-C*S 

f)^1"it**-*4r7 y 7^7p 7^3 2 8{cA^1"5J: 

[0 0 5 1] 4#@(^>7 h Ui/^^ii, 4 0^)7^7 
7 P 7P77'3 3 2 I 334, 336, 3 3 8 fimfc&Wi 

#7^^^703/^3 3 2, 3 3 
4, 3 3 6, 3 3 8(C(i^n^ttA^^il^i-^-fe 
^ 3 3 1, 3 3 3, 3 3 5, 3 3 7 tfffiffi $ tlX ^ 5 0 
l#@(Dir u* * 3 3 1 irfi, A*>r-*IN3£ 7 y y 
7^707/3 3 2^tti^l^J:0 ? 7 ^7^707^334 
Wtti^?55A^$ttT*J!9 ^-Tixfr-JjZy y 7/707 
^3 3 2KA^-r6J:5fwSfig£ftT^6 0 ^fc, 2# 
@Oir 3 3 3(C<itr[©<D7 1)7^707/332 

(omti. y V yy>y* y?3 3 4<nmt)to£tfy 1) y?* 
7P7/3 3 6 wm/3^A*SixX*3!J ^i"ix^-**: 
7y7^707^3 3 4ICA^-T5J: 9lw«^$tlTt> 
6 0 3tSOTU^? 3 3 5l:i«^)7y 7/7P7 
^3 3 4tOttJ^. 7y77 1 7D77 J 3 3 6(OttS^i)J:tJ 5 
7^7^707^3 3 8<Dmfi&Aft£tlX}S*)^'rtl 



(8) 



7^ 



20 



30 



40 



50 



34403229 • 

4 



(9) 



2003-15522 



15 

£ixTl>6o 4#g(Dirix? * 3 3 7 \Zt$ift&<Dy y y 
3 3 6(Dmtt, y V y^y^ 3 S(Dm 

fl^TiX^-^Sr^y yy7n^3 3 8 {;: A^S <fc 

[oo5 2] zv±oizmi&Ltc*mmi'VA*mshif 

t Row£&[p]3g£. #&»£fctt6 + KHIl'^**£ L 
7h^OO, A^X-^INO-INSIC^ft^ixS h 



70 



16 



-^A^^^Tim, 1 lM*^@lcA*j£ft/c4 
0(08t'7h7-^ll ^WiX7y y/7D77 P 3 0 
8, 3 1 8, 3 2 8, 3 3 8\Z7 >y?£tlX\,^Ztt 

10 0 5 3] ftlCShift Row^fe(0®)f^lCot>T|£^i- 
3, RijndaelT/l-^y XATNi, Atif- * ZZtlZfth 
8bit(Ox-^a00~a33IC^fiJUm^'V h y L 

otl^o *»W"Ctt, X-^^toS«S^Column 

s^ict'K rai:«ia-eshift Row£&&3i£2i5ii- 

[0 0 5 4] 
[*4] 



Row 



flOD 


aOI 


a02 


a03 




all 


al2 


a13 




a21 


a22 


a23 




a31 


a32 


a33 



Column 



Row 





aOO 


aOI 


a02 


m 




alO 


all 


a12 






a20 


a21 


a22 


a23 


f 


a30 


831 


a32 





[0 0 5 5] m4&\Z9jki-£ #Row (t?) Kfctt 

6^-^dS&58<OColumn^P)l«^KW$tlT^6«t 5 4 

us Six*, m^im^n. §t4^nkirxo 

tM^ColumnA^WtCAQfJl^llff^ns, 
[0 0 5 6 ] Shift Row£»«L3!-ertU tf*flSB»l£«U 

[*»<b] 

ASK 



30 



1 Byten-r— h >7 K 3 @ £:£ 2 Byten — r 
"^>7h, 4fira*i£3Byten— r- h-TS, 

[0 0 5 7] 
[^5] 



aOO 


aOI 


a02 


a03 




aOO 


aOt 


a02 


a03 


a10 


all 


a12 


a13 


SlBytoQ-r-K'71 


all 


a12 


al3 


a 10 


a20 


a21 


a22 


a23 


*2Byton-r-^>7F 


a22 


a23 


a20 


a21 


a30 


a31 


a32 


a33 


£38yteP-T^v7h 


a33 


a30 


a31 


a32 



[0058] *tt* m^rim\zn, m%itmtm%&® ! 

ttH, 2fr@ SByten-r- h~>:7 k 3 ff S 
[«Ht] 



££2Byten-x- k>7 k 4 ff B 1 ByteD -r 
-h'>7ht5 fl Z(D-t\zX^0. «6fel:^t«ill 

[0 0 5 9] 
[H6] 



aOO 


aOI 


a02 


a03 




aOO 


aOI 


802 


a03 


a10 


all 


a12 


a13 


^3BytaD-f-hv7h 


al3 


alO 


all 


a12 


a20 


a21 


a22 


a23 


^2BytetHf-Fv7^ 


a22 


a23 


a20 


a21 


a30 


a31 


a32 


a33 




a31 


a32 


a33 


a30 
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[0 0 6 0] * jtft««-CJi, 0 5 X b 4 + 

i^**&Shift Row3e»IIIK*:ffl^XV^ 0 

70J//3O 8, 318, 328, 3 3 8l:7^f^il 



M2 0 0 3- 1 5 5 2 2 
18 

1 Byte-f 0->7 h 

Lfc#oX, x-*0&iIKi#;fr^^6X-fc£ 

t RowAQ.31fl(Hia7^fc<OJ;5 4»lBi:4e, 
[0 0 6 1 ] 
l*7l 



a03 


a02 


aOI 


aOO 




b03 


a02 


aOI 


aOO 


a13 


a12 


all 


alO 




□10 


a13 


a12 


all 


a23 


o22 


821 


a20 


*2BytcO-r4->7h 


a21 


a20 


a23 


a22 


a33 


a32 


a31 


a30 




a32 


a31 


a30 


a33 



[0 0 6 2] ^5 tmm<Dv-T- Yi/7 b&ftotctb 

2fT@££lByteD-x- Vi/7 K 3 fr @ 2 Byte 
p-X- h K 4fT@^^3Byteo-x- h >7 h 

[0 0 6 3] r^J: 9*Bt*{fc«PlC*3lt6Shift Row^ ^ 

ift Row£*[Htt*ffl^T«-ir U 1 

2 8 fc'y h WiT^i LTf-^ ^A^x^lf 9 0 
[0 0 6 4] l#@CORow|COl>TIL */7 h0)£W 

/i^fc^, #tl/^^ 3 0 1, 3 0 3, 3 0 5, 3 0 7 

^lByteo— X— h^^fTi"5fe^l-. i? U £ ^ 

3 i i <n± i-tfU&m&c t U ZtlSXftfD^U? <? 3 
13, 315, 3 1 7 ?{&WZb t~fZ> 0 3# 
ScDRowlCO^Xfi, ^2ByteP — 7^— h *>7 h&^fr 
■fSfctol^, U£ * 3 2 1 , 3 2 3, 3 2 5, 3 2 
7CQi? *f£g£ c h~tZ> 0 4tlORowCot>T 
11, ^H3byteo-7^- h'>^ h£HfTl-£fc*!>l^ * 
tl/^ 3 3 1, 3 3 3, 3 3 5, 3 3 7 Oi? U ^ * ft 



[0 0 6 5] HfTidi U ct 5 ftShift Row^&&i3l£3lfT 

#7 y ^7o ^/^^y^^LX^effi^x-^^ias 
{c^-Ti: 9ic^n^bOO~b33<t-T6<h. ^tti^x-^ 

[0 0 6 6] 
[^8] 



ShiftRow*** 



b03 


b02 


b01 


bOO 




b03 


b02 


bOt 


bOO 


b13 


bl2 


b11 


blO 




b10 


b13 


b12 


bit 


b23 


b22 


b21 


b20 


3 


b2l 


b20 


b23 


b22 


b33 


b32 


b33 


b30 


b32 


b31 


b30 


b33 



[o o 6 7] m^itmaL m4<D£?\z%m<Dmfrb 

[0 0 6 8] 



aOO 


aOI 


a02 


a03 




aOO 


aOI 


a02 


a03 


atO 


all 


a12 


a13 




al3 


elO 


all 


a12 


a20 


a2t 


a22 


a23 


*2Byun-r-|^7l> 


•22 


a23 


a20 


a21 


a30 


a31 


a32 


a33 




a31 


a32 


a33 


a 30 



[0 0 6 9] ^6 tm&(Dv-=T- hi/7 VZ'fiotzV) 

|?9 (D^iZTjk-t X 9 \Z % lfTB t U 

2fT@^*lByteO-x- h'>7 3 § 2 Byte 
0-f-h'>7h, 4fT@^^3ByteO-7 1 - h h 

[0 0 7 0] Lfc^oX, S1r»Lfcl»^fb«F^*5Jt6Sh 
ift Row^^Bf^^^lc, *PiB«iU^**jfeShift Row£ 
^(D-t *ftE£I3:£LX. ^ 8 



ift RowK*«a*r*fTl-6r fc*«BT«i:45. 

[0 0 7 1 ] r^-<h{cj:f9. + 
Shift Row3S»lHlK-ei«#fk^fcJ:t/ffl*ibNFlw*5*t6S 
hift Row£ft&£&&ffl-f *w£*SX-#*o 

<Mix Column^l^lHl^) C «D^JS^XSffl $ *t£Mix 

[0 0 7 2 ] CoQMix Column^&[e]S§fi4 0(0gn 78© 
50 83 5 1, 12^^3 5 2, M3if^3 5 3, gU 
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8883 5 4mm. »iflt*»3 5 zti 

1, Sg2J!g3&3 6 2, 6 ^4^@8 

3 6 4 £ . 3 6 1-3 6 4 ^ttl^O^te^^S 

fc^ll£2ltTl-£EX0R[eJ&3 6 5 £-e«jS£*iT^5. 
«t<Ote<0»2«»»3 5 2-»4»S»3 5 4llo^T 

[0 0 7 3] (aOj.alj, a2j, a3j) T-flt/fc £ il £ g j # 
gGDColumnSr (bOj, bl j, b2j, b3j) "C«fi8$tt 5 Column 

S^Columnf^x-^ (bOj, bl j, b2 j, b3 j) |i % fc(D £ o 

bOj = 02*aOj + 03*alj + 0l*a2j + 01*a3j 

blj = 01*aOj + 02*alj + 03*a2j + 01*a3j 

b2j = Ol*aOj + Ol*alj + 02*a2j + 03*a3j 

b3j = 03*a0j + 01*alj + 0l*a2j + 02*a3j 

bOj = OE*aOj + OB*alj + 0D*a2j + 09*a3j 
blj = 09*a0j + OE*alj + 0B*a2j + 0D*a3j 
b2j = OD*aOj + 09*alj + 0E*a2j + 0B*s3j 
b3j = 0B*a0j + OD*alj + 09*a2j + 0E*a3j 

#«^*»$tlX^5«fttt-ttt-en2«T^l 

[0 0 7 4] Z<D£?fMx Column^&&3l£||ff-f 6 
tc$>\Z s Column*ft^3 2 f y V *:* *L«X*I 1 

8H8&3 5 1-I4i^3 5 4l:A^LT, BliS 

[0 0 7 5] &7fSIS8 3 5 1-3 5 4 KKtt fcitSSHS 
§§3 6 1 -3 6 4te x »-»fc*5J:tfa#«)l^"fiXO»'fr 

[0 0 7 6] m 18HS2 3 5 1 (0^1^g[§|3 6 1 "C 
li, At>£ftZT-*\ZftLX0xQ2m£tcttOx0Eft<D^ 

i"*i*»«)*ll*SBJIBi:4oX^5. $2igf3 6 2X- 

fit, A# ZtlZT- * \Cft LT0x03fg£ /cliOxOBf^tD^ 
•ftt*^*»dSBJt6t*oT^6 0 *3*S»3 6 3-C 
A^$^6r- * fc» LTOxOlft* fcliOxODffiFtf)^ 
■f^*^*S^^JIBt*oT^6, 84*»B3 6 4t 
(i, A^$^6x-^lC^LT0x01^^/cli0x09fgoT)^ 

[0 0 7 7 ] I2j^g§g3 5 2^»1*»«-Ctt, \Jl 
£ 5 r - * K *t L X 0x01 fg £ fc te0x09{£<D V >ffi*^ 
*K*^tB^ftoT^6o SS2*S&-Ctt, A*>£it6 

* LT0x02fg £ fcttOxOEfflW^T tt*^»** s 
STfBtttoT^S. *3*S»-C'«i, 7<fiZtl&T-# 

LTOx03B*fcttOxOB»cOl>rJx^fiO*!l355pJte^ 
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<tot^, m4^g^x-fi, A^^nex-^ic^t 

T0x01fg£ fcttOxODfgtfH^T tt^«>5kll# pjfgt o r 

[0 0 7 8] mS&W&Z 5 3 0«Bl»»»-Cli, A^ 
£ tl h ?— * iZ ft L T 0x01 f£ * tc fiOxODfg <D I^T*l**G> 

x--^^^LroxOif&^fciiOx09fg^^-fix^^g^ 
*r«**oT^6 0 »3»»»X-tt, A*£*iSx-* 
lc#LXOxO2«*fctt0x0E»<^^i*ix^*Wds^ri6i: 

T0x03«*/bli0x0B«(D^-ftt^*K*Snrffit*oT 

[0 0 7 9 ] £4ftJM»3 5 4^1*SS*CI1 A*f 
£ *t 6 t"- * f;: 2t L T 0x03fg £ teOxOBfg tf) t ftrt^ 

•T-^lc^LTOxOlfg^/ciJiOxODteO^-fix^O^g^ 
*JiBJ:ftoT^5 0 *3«*»-eii, A^£ix5x-* 

^ •C0x02«*fcJi0x0E«^^-ftL*^*JS[^Br|6i:*oT 

[0 0 8 0] r<OJ:5**l«*»3 5 l-»4*a£» 
3 5 4^fBlffe»»-»4*»a&(0*«»S:lt^l:«p*3 

*3(t5Ia]iK»*S:*iilcttffl-r 6 ^ t ds^Jtl 

<Mix Coluran^j^lHlKO^^^) Mix Column^ftlHlK^ 

[0 0 8 1 ) A^^n^>8 fc'y hf-^ (a7,a6,a5, a4, 
50 a3,a2,al >a 0) [ZftL, »M (b3, b2 t bl, bO) ^^8^fT 
9^^^i"6 0 -tf>^£\ 8^yhf-^ (a7,a6,a5,a 

4,33,32,31,30) IC^^^#t'y h*m%i-5>&ftmwi 

7 5-3 7 8 *ttttT^6<, ^^IC, ^^(D^± 

ttb'y h^^gi-6^^©^g^3 7 5(08SB*I^ 

it, ffl»a*»«as3 7 6 ^>«*e*ari h->7 k 

$*TAD»i-5AD»»3 7 K Si5^S88^ 3 7 7 

try h->7 h £ -£T*D|? 1-6*01?^ 3 
7 2, gi5»SS»«U3 7 8 0KItMtrS6l:i tf > h 

^ §§3 7 3att*£ft£»#att£tt3 7 5, ^^P^^3 
7 1 - 3 7 3-C*- /<-7n- tfc#^ y-*SA** 
fr> »»JCj:i)BfeS[Stt-5l»»»3 7 4 *S»ftP>ixTl> 

[0 0 8 2] «R_(b3,b2,bi,b 

o) tur, w#<bWic*jjt6«*f:**fb#ic*5rt-6 

Sr»*fbl»t*»fbl»^*J^T*ameffl-*"5it*5-C 
[0 0 8 3] (b3.b2.bl.b0) t LX± y h ZtlZ>&M 

50 <i % H(r^LfcJ:9ic, #iS^i:opt2ofo^^$ 
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02,0x0E) , (0x03, OxOB) , (0x01, OxOD) , (0x01,0x0 
9) 0 4i§DX£>9, Zth&TtiL* fc'y hX^-f-5 
<b, (0010,1110) , (0011,1011) , (0001,1101) , 

(oooi.iooi) bttZ. r<0J:5 4«*lw*5^T*iii- 

stry Koasntt^a^ftiai^tTto-r. s**try h 

[0 0 8 4] fc<t;Ltf, fitfttf (0x01, OxOD) 
fcttatfrfr* 2 2iK-c*si-*fc (OOOl.llOl) fcft 
0* lfi2 fc'y h«>a»a<0*D»te*«:Tffi2 fc'y h<75 

*«KLT*JI^*£fc#Hrt8fcftS. (0x01,0x0 

d) <nm*&iiit<Dm&ic&rtz®&mi&<ow*:m8{z 

[0 0 8 5] 08flt 8 \f y hr-^ (a 

7, a6,a5,a4,a3, a2, al.aO) dftL, 1 fc* y h *>;7 h 

xto£&Ji£3ifT-f *ssi Erases 3 8 i asRttfcftT^ 

6 0 f§l*Dg^3 8 KDffl^Ji, IW»ov?yn 8 2£ 
tlti2 *D§3§3 8 3|:A^^tlTt^ 0 Z<Dm2lm 
»3 8 3fi, gSOiTftfy 

*£*0*"*-6fc<*>X-fcoX, A^^ix68k'5/hf-^ 
l:^U3t'i/ hi/7 h£^T*Dg*0S£llfTl-'5 J: 5 

[0 0 8 6] m&%3 8 3(O«»jB*^*l*0»»3 8 

1 lo£Xfm2to&$s3 8 3ft-^-7o-U;^rt y 
-*SA*$ix, Bfe»lc«t!9|»»*ix5»»*3 8 4 dStt 

[0 0 8 7] ftJ»Pv?y£ 3 8 211 &&#0x0lX&6 

»*lctt. ±ffi2 try h^S»fe**c*>SSBi*D»»3 
8 1 <&tta«:SB2*D»3&3 8 3JCffl*L4l\ ffll 
|nv;^ 3 8 2ll 8Wk3ftSOxOD1?*>«»*lCf±, ±{4 

2 t'y h<7)«gfe*-CfcS*ian*»3 8 KOffl^SrS 
2*n*»3 8 3ictti^i-^J: 5lw*rtSii5. 

[0 0 8 8] rrT^^W(iTO#3l^M(x) = x 8 +x 4 
+ x 3 +x+ltt6GF (2 8 ) K^ilffc^ AO 

*i*gf (2) ±x'<7)i)mx*hztzit>, ymttoffimftm 
%xn$L-rz>ztfr*imxhz> 0 

[0 0 8 9] Z<D± 2o^t^i/j:5t:'-y hll 

fclt6»»a^D*toS*M»i-6C tJcj: »j|H]K«« 

IB t ft 6. 

[0 0 9 0] r«>«^y^a-/w»tt, id, te^cii^ 

fitn^^SlOl, *£**U5*** 1 2 0*5J:tfttA 
1 3 1 i^b»J«$ixX^6, iA^Uy^ 
* 1 3 lfl, 8B<0 3 2 tfy h I' ^**k0-k7 
£ix62 5 6 h^US/^-C*?), US^^kOj^fc 
3 2 t'y h S ft * c m%M&2 5 
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6 bfy h^S^lw(iUv?^^k0-k7^XiC^-i?^»|ft 
£ft, 0£-§-^> 1 9 2 t'y h^^KfiUv^^kO'-kS 
l-r'-^tfftfftSft. «^1 2 8t'y hOi^Cli 
U^**kOMi3fc:^-*j&s»*ft£fta o 

[0 0 9 1 ] iA^l/^^ 1 3 1 fcfi, #^^X^kO 
-k70 9 *>^Tft^ l o<7)M£iltRtt(ctb;ft-f £1r 

* 1 3 2 £tiX^Z 0 :<Dti/^ l 3 211, & 
A^Uv^* 1 3 1 (0 2 5 6 t'y 3 2 t* y 
h<Dr-*£^iRLX&*HU'^x* 1 2 0(O^Tttlc 

[0 0 9 2] fc±m U»^^120ft 3 2 fc* y h #{4 

x<D&m&v]mfj: s moy y y-fyu yf\ 2 1 ~ 1 2 
8*Wftl»l***tfcS/7 h u^**"e»/*£ftxi*6 g 

iTtti:6It$7y y^7D y^l 2 8 Kit, 
9 1 3 2<DtfW£fcfc&£/£p v?y*an 0 1 OtU^^: 
SKI" Si? 1 1 3tf)ttia#AaSftS. 7 

7n y^l 2 8 0tB^W7KEY(i, 7y y ^7Py^l2 

7 ICA^J £ftXl^6 0 y}) y-fWy-?\ 2 1 <D\&-hm 
KEYte, 7!)j/^7D^126^"ai:*)5tU^^ 

*0 1 1 2ICA*}£ftX^<5o "fcl'** 1 1 2KI1. 7 y y 
7^70 y^l 2 7<75tB*W6KEYt«:*«±fi8o^y^ 1 
0 1 iDttt^^A^ftX*^ , l*irtlfr-Jj&7 y y 
^7P^12 6CAM6 J: 5fc*ric$ftTl>S 0 
[0 0 9 3] 7!l> ( y/7Dy7'l2 6 <^tii^W5KEY{i, 
7y J /^7Py7'l2 5l;A^$ntl^, 7y^7 
P y7"l 2 5<OtH^jW4KEYtt. 7 y y :/7 P y ^ 1 2 4 
i/^lll MA^ £ftX^<5„ i? 

* 1 1 1 7y>77'7P5/7 P 12 5 ?>tH*!W4KEY<h 
*t*«ftj*o^y^ 1 0 1 ©W^^^$iXt*i»), 

30 Ji^-*«: 7 y 5/ ^7 d y ^ l 2 4 I: 5 J: 5 

[0 0 9 4] 7!) S /7'7Py7 p 12 4 Offl*W3KEYtt, 
7yy7 P 7Py7 p 12 3(:A^$tlTt^ 0 7yy7 p 7 
p y^l 2 3C0tB^W2KEYIi % 7^ 7 /7p^122 
t-A^£ftX^5o 7!i '>/7n 7^1 22 CttJ/jWlKE 
Yfi, 7y^7P^121llA^^t^6„ 

[0 0 9 5] S*«tiDi;^Bl 0 1 I*, 
J*ffl£»RconJ&s»fa$ftX^6ROM 1 0 2, ROM1 

0 2 ^ ib R*HJ £ ft 5 fl t R ffi«*§-RCON#EN £ <Og£3Ili 
*0 ^^rff 0 3, tfrXmisi?** I 2 0 OS 

nd®^ i o znmtitfKfizixxmiktofcmftmwi&g: 
'n-rznom® 1 o 4 ^^^x^^5o 

[0 0 9 6] ^fc, tt^Htrto^y^ttl 0 1 11, 7 
y y^7o y^l 2 1 *]W0KEY, 7 V y?7u y? 

1 2 4Wffl*W3KEY, 7y y^7Py^l 2 6Wffl/3W5K 
EY, 7 y y^y p yy 1 2 8 ^W^ff7KEY^ A^J ^ ix, 

^m^io^iawwicai^-rs-feU'^^ 1 o 5^d^ 

Tt^c -t 1 0 5(Ott)^*l, r-^D-T-y 

5^ g y^^^rfT^Rot BytelHl^ 106, ir U ^ ? 1 0 7 , 
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9 I^A^ixTl^o iru** 1 0 7K 
tt. Rot BytelHlSS 1 0 6^{ti^ni/^^ 1 0 5<D&t) 
&*.*}£tlXteV % ^-r*U&»SrSub BytelHl^ 1 0 8 
j^i"6 0 Sub BytetUgg 1 0 811, 3 2 t* y h #^Byte S 
ubKftfti3iS:j|fTi-6t«)T-*>fJ. ^Offi^j^-feU^^ 
1 0 9 5 0 tl/^^10911, Sub Byte®8g 1 

o 8otB^t-t u^* i o 5<offl^As^^$^ ^rn 

lt*ttap^y^JBl 0 1(1, EX 
ORlElKl 04Offi^^tl/^^l 0 9 0ffl*JJ&SA#S 

*u wteWttaaassrutT-rdExoRisiB 1 1 omx 70 
[0 0 9 7] z<D£i\zmiSLZtiz&x*is=.-*&-e 

fl, ?>yK77^*>3 >35(7)Round KeytJD^&S 
KE^ *#fcB*fc*5ltS*Artl^ 

ft*fl**0a-* («:ttfi=256brt) 



Hx6 0 

10 0 9 8] 7 £ > K7 7 > a Vgfl<7)Round Key7J0 
K*i3l-efflt^iX6Round Keyli, ftft 2 5 6 fcT y h tf) 
$&-&"Cfl, Initial Round Key £ Round Key01~Round Ke 
yl4tf)£ff 1 5fl&££&& 0 &Round keyttJtt9^ny 
^*fc»*LT 1 2 8 h*e»*$^r*5!9, 
&=L—A>a-C±&Ztl&Z 2 tr-/ htf>tfc*«"C#Round 
key«rfti51-5fc«>l£li. W00~W59<£> 6 0m<O&*M& 

ttW00-»W59*>l«fcttffi £*U ^fcB#{rteW59->W00tf)KI 

B»»fl:»«^woo-ws9o)Blctt*ll«r**i-5 

10 0 9 9] 

[iio] 



No, 






00 


W0O=(kfl> 


WS9 


01 


W0l=0t1) 


W58 


_fl2 




WS7 


03 


W03=0tf) 


WS6 


04 


WM=0i4) 


W55 


W 


WD5=0<6} 


W54 


06 


W0$=&6) 


WM 


07 


VW7»0i7) 


WW 


08 


W)e=^SU>BvU(RctSvtoftWTO*IW 


W51=W59"V6B 


0? 


W0*=WD1"YH» 


WSO=W58*W67 


1Q 


W1Q=W02~VW9 


W4$=W5T > W56 


11. 


Wt=W03*W10 


W4»^*&ibByta0^atfiyta(W5S>rRoon[7] 




W12=*©4*S0bBytn<Wl1) 


W47=W55"VW4 


13 






Lft 




W5=W53"W52 






W44^W6Z"SubBytaCW51) 


1« 


W18=W08 M 8ii)eyt B 0^atBvt B (ms)rRooi^ 


W43=W51*WW 


17 


wi7^wa*vne 


W«=W50*W49 


IB 




W41=W49"W48 


19 


W1 9=^11^8 




20 


W20=WirSubBvtc(Wl9) 


W39=W47^WB 


?1 


W21=WirW20 


W37=4V4fl"W45 


2? 


W22=WI4"W21 




23 


VW«V15^f22 


W35=WM"&i»Byte(W43J 








52 




W07=W15^14 


53 


W5SaMTWS2 




54 




VW5^W13>1fl2 


55 




W*=W12"SubeytoCWlt) 




W^4rSubBvtB«rtfiyt^W55)nW7l 




57 


VW57=W49"WW 




58 


W58=WS<rW57 


w©i=worwoa 


59 


WS9=W5I"W58 





Round Key 



KcyOI 

\ 

Round 
K«y02 



Round 
K«y03 



Round 



Round 
KeyOS 



1 



Round 
Key 13 



> Round 
Key 14 



[oioo] ::t% st^{ki*<ott*«iff08tt, wos=woo 

"Sub Byte(Rot Byte (W07) ) "Rcon[ l] tf>5£(C J: *) s ffOO^S 
ub Byte(Rot Byte(ff07)) t S RRcon[l] £ DftftfaHttS 
ft-C«*£Jx6. A"A=A£^5tt«&fl]ffl*r6£ % 
«W00(i, W00= W08"Sub ByteCRot Byte (W07) ) "Rcon[ l] 

x-mtsti. TO8tf07*»6ftrii-e#6r t^*>3&»5. io 

X. a^-ft-Cfl, -J.. W00=>W59*-C*JSL-C, **Ht 
^0#t iS?iOMB#W59=>W00T-tt*«Sr5t«Ki-6 ^ <h ^^Iffi 



50 



[0101] ST, 7 F77>^->3 >^T-t^)Roun 
d KeyJjn»ffltt*»(0±fi6lCO^TttWrS, « 1 0 C 
^1"<t 9 lw#7 t> V KcORound Key*0^XM<i(7)^^ii(3 

XOMix Coluran^}^ + Round Key/JD^<7V< y ^ ^ y V y 
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^ cDfc^n 9 \z.^-rx ? fcii]8S»j*K*5^-c, 

5. &*&U>>** 1 2 0iiv7 h l^^^^T*^ 

fefc&l*. 7!i ^7B^1 2 1 <7}tfj*>W0KEY£ffl^ 

[0 10 2) 6*»tSoi;^jill 0 l<Oi?U** 1 
0 5(SEL#B)tt, Si llC^i-ipl^, 

It. fc*:&£f£D *Jy91&\ 0 1 Offl^##&£;h,5-fe 
^^111, 112, 113 (SEL#E-SEL#G) II, ft 

i~i 1 3<n±i»* f{&m.ftb&m9i£tiz>o zbiz. 

1 0 1 0 9 (SEL#C-D)(i, ^ 1 SlC^i-J: 

6 0 ROM10 2|d|i > EXORIhISS 1 0 4 [C&jf&^ftS^ 

ftRcon[i]*steffl£ixTio?K T Kl^^ i 

SELC~SEU>*« 



26 



6*£»Rcon[i]#* 1 4 iZTjk-TX 9 (Cfcifa£ftTt> 

[0 10 3] 
[Si 1] 

SEUBWW 



M 






126bit 


W3KEY 


W1KEY 


192brt 


W5KEY 


W1KEY 


256bit 


W7KEY 


W1KEY 



10 



[0 10 4] 
ISl 2] 



SEU.E-SELGMW 



M 


SEUE 


SELF 


SELJ3 


126bit 


a 


b 


b 


192bft 


b 


a 


b 


256brt 


b 


b 


a 



[0105] 
[Si 3] 



tin 






W[i]=WG-NkrWG-1] 








WD]=W0-Nk]"SiiiByta(Wlr1]) 


b 


a 


ft 


VVD]=Vffi-Nkl"SJiByla(RotByta(Vrth1]))"Rc<wiD/Nk] 


a 


a 


Byte Sub 


0 


b 



[0106] 
[Si 4] 



Rcon ROMr— 



RooftAddr 


Hex 


Bin 


01 


0x01 


0000.0001 


02 


0x02 


0000.0010 


03 


0x04 


0000.0100 


04 


0x08 


0000.1000 


05 


0x10 


0001.0000 


08 


0x20 


001Q.000O 


07 


0x40 


0100.0000 


08 


0x80 


1000.0000 


09 


OxIB 


0001.1011 


10 


0x38 


0011.0110 



[0 10 7] Si OlC^i-J: o\Z, Mfi# 2 5 6 t'y h 

1 3 1 (D^Uv/x^k0~k7(7)il^D- Kt6:i:l:J:o 
T\ No. 00—07^^ ib <nti)%\mfcfcl:mi'i>X* I 2 0<D 
&7 y '^70 y"f\ 2 1-1 2 8 Kir h £tlX\,^Z> 

[0 10 8] B&^fk^fiwioJt5te^iiW08li, 11 01: 
^£tlTl^Z>£o\Z, \V08=W0O~Sub Byte(Rot Byte(W0 
7)rRcon[l]T-*a@£*l6 0 ' (Dff08=W00~Sub Byte(Rot 
Byte(W07))"Rcon[l]«>SaCB8»«F{rii, 7!J y/70y 
7°1 2 1 (Otb^WOKEYICIiWOO^Ir^ h^ixT^d^), EX0R 
\b\&1 0 4\zAt)£tl?> a £fc, 7^.7^70^12 



*: don't care 

8©tB^3ff7KEYl:fiW07^-tr >;/ hS*l/C*3»K r<7)W07^ 
tl/^105 (SEL8B) «CX*StfC^-5 0 

[0 1 0 9 ] R0M1 0 2<£>RconT \>* U X % " l" \Z U AND 
SlBl 0 3l::A^£ft6i!tttff ^CONSEN^*-^ 
lat, Rcon [1]" WOO c7)^g$rEX0R(H]^ 1 0 4T*fTl/\ 
30 «tWie»«:EX0RlE]Bl 1 0CA^t6, iru* 
* 1 0 5 (SEL#B) £i§i®L 7^071:):, Rot Byte[Ej& 1 0 
6 <hSub ByteS&l 0 7 J; Z>fomfr'fft>tl. Sub Byte 
(Rot Byte(ff07)) <&*KJS*tfEX0R[slK 1 1 OKA^* 
il6o J:oT. EX0R[h]3§1 1 0 T'tes W08=W00~Sub Byte 
(Rot Byte(W07))^Rcon[l]^^@^fjh>i X( 5 o 

[0 110] tt*«W09=W0rW08<D«K*Q.3£tt 
W6 0 W09=W0rW08^«»BB*&fttCli % 7y-^7P 

^121 <Dmmom\znw\fr-t y b £tix&v. ex 

OR0K1 0 4\ZZtltf\j]£tlX\t^Z c 7!)^7oy 
40 ^1 2 8Offi*W7KEY^IiW08*S-t5/ K*tfCj3!9 % ir U 
^105 (SEL#B) ICA^^nXt^o AND0&1O3 
I c A ^7 £ ti h 1ft ft « RC0N#EN £ -r 4 -fe - ^ /H Z L T x 
7^^70.^12 1 J&^A^I$ix5W01^^^**E 
X0RHJ&1 1 OCA^^fix^J: 9(c^^i-5 0 Z<Ot 

tl/^109 (SEL#D) "Ct^ir *|ftK# b IC 
IS:££;ftT*3*K tu^M05 (SEL#B) £iIi@LfcW 
08#, ti/^M09 £^LT^:(a££EX0R[E]& 1 1 0 

[0 1 1 1] «toT, EXORIhISS 1 1 OT'lt W09=W01"W0 

50 B<omft&¥rt>ti&* W10-W1K wi3-wi5t>i^i:/<;i-e 
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^tt^ixSKAstT^*. &;M^12^S^&3I&lfc9j 
1-5o &*^12=W04~SubByte(Wll)T-g|g£iX. ^<7)S§ 
W<0§B»«PlCtt, 37 y >>^7P';/1 2 1 Otii^jWOKEY 
KttW04j&s-fc* EXORESS 1 0 4 ICA^£*XT^ 

5o £/c. 7!j ^7^70 1 2 8<Dtii^W7KEYlC{«ll 
JHry h^ixT^Dir 1 0 5 (SEUB) KAAS 

fbTt^S. ANDH&l 0 3fcA*$*lSRHJfI*RC0NttEN 
^f-ft-yy^lt, W04#*rtf)**EXOR[s]88l 0 4 

(SEL8C) ■Ctt-feU'^^ffi«i6SblC»^SttT*5?), H? 
U^105 (SEL#B) «:«« LfcWllj&s, tl/^10 
7 (SEUC) £rfrLTSub BytelslSS 1 0 8\ZAj]£th 

Z<DZ k\C± *) , Sub Byte[R]SSl 0 8l-J:^Sub By 
te^Ss&SfTtoiX, Sub Byte(Wll) <7>»gif£^EXORll]88 
1 1 0(CA^^tt-5o J:oT, EXOR0&1 1 OTU Wl 
2=W04~Sub Byte(Wll)(DfltJS*Sfi i *>iX6o 

[0 112] K±(0«fBT-^XOtt*«^o^-C»»dS 

*«>*»*tL<W[*ftl:iA, iA^uy^U 

[0 113] fcArtU'v'** 1 3 llciry hSfifctt;*: 
KtOMttfl, *fe ^ 9 9 1 3 2 (SEUA) t£ <fc 9 3 2t'y h 
mtt-Cr-^SRj&sfftoix, iru^^ 1 1 3(SEL#G)(£> 
iru^*ffi@b£&&LTi£*&U^** 1 2 0l:ty 

fek&u-^** l 2 Oil. (UrseufcJ: 
7hl/^^iStfo^ 7^y/70^128 (FF 
7) =>7 y y-fVxx 2 7 (FF6) =>7!)y^7Py 

/126 (FF5) =>7!i 7/707^1 2 5 (FF4)=>^ 
U^7077 P 124 (FF3) =>7 U ^7^70 2 
3 (FF2) =>7y s/7'7Dix7 p l 2 2 (FFl) =>7 y y ;/ 
7P^121 (FFO) ^^'>7hLTft^, 81^* 

132 (SEUA) T*3S«$ix6i^*^-*ttMAai' 
^^13 1 <DU^**k0,kl,k2,k3,k4,k5,k6,k7Ol<a 

[0114] m^itmvmAtji'i/x* 1 3 1 

*{fc-COftl»tt*|i<0-fey h (W59-W52) t1"-5^S^*> 
5o StA^L"^** 1 3 l<Dm&?L^±V) , HA*U^ 
^131 ic-fey hSiifc^— ^«:l»»Lfc*ft-e, - 
0., 1 2 OKIES U rtP-^fc^ffi^Ji^ 

rtnai-itt\ m&&±m<n±yh (\v52-w59) *-ch 

9<7>ls]S§£®jf^£-£6o 

[01 15] z<D&fe&±m<n± y v<n&mm\^. W5 

2<&±jSB#KW52&|^au^** 1 3 1 <OUi?**k7fc 
(EiSU W53<04j*B#j;:W53&u^**k6l£fii£U W54 



(15) M2 0 0 3- 1 5 5 2 2 
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*>±tfB»teI54*r U-^^^kSI-te^L. W55<D±J«B*KW5 
5£ U 2/**k4l::(E2S U W56«)*j*«FliWS6Sr US/**k 
3(cgiSL, W57<D£j£i$|;:W57£u^;**k2l;:&i£U W 
58<O^Js6ftlCW58S: U v?* * klfcfiS U ff59<D£/£B$l:i 
ff59$rk0lcfeii1-5wi:(cJ:!9QA^u^^^ 1 3 1 \z 

■^^13 1 <&*»t£*«0)ir * h«rJft»Lfc*«fe-Ctt 
l 2 o K-SWoiA* 

10 &7-fZ>^<7>'&. -tlsf* 1 0 5 (SEUB) . tU^ 
1 0 7 (SEUC) % tU^109 (SEL#D) % i? * 
111-113 (SEL#E-SEUG) ^II 1-113 ICtf 
1"J: 5 fciri'* U 

«*Wft**i-6 0 (Byte SubSE*lslK<D*fflft> ±& 
Lfc*^frS^-/utt£>Sub Byte^*3<tt57^y K7 
T >^ *>3 >gfl<DByte sub^^^TMi, £ 3 2 t' 
* h$MfcT*tf)Byte Sub£&&3l£||fT LTl>6fc#>, ~ 

[0 1 16] tzbjLtt. 0 9(C^i"iiX^v?i-/uaic 
50 tSffbixSSub Byte0J§l 0 8^7^ K7;^^'>3 

U-^^^jKtShift Row^tftlHK2 0 6 j&»fcByte Sub^^ 
iB 2 0 7 -(DA^BSIN^, 13 9 (^*-f4£*:«4* n 

5/^gpioi^ti/^^io 7(D^u^^f)i:®c icg^ 

1-6, $^>{w N i£*«^J*n^y^SUl 0 1 (DSub Byte 
\ 0 Sfrh<Dmj]*^ g|4tf)Byte Sub^^0SS 2 0 
7(Dttl^BS0UTir Lttl/^^ 2 0 3 li»|«i-$ 0 
[ 0 1 1 7 ] Sub ByteleJSS 1 0 8 £fflt^TByte Sub^^ 
30 jfiatrff 5»*lCfl, ^1 Z\Z7F-r£oKL s ^Isf* 1 
0 7 (SEL#C) (Oir U^^fig^rc ^ L, tu^lO 
9 (SEUD) (Oir u^^fig^b <h-T5o ^(^c^lcj: 
oX> 8**4liPv?^ftl 0 1 cDSub BytelHlSS 1 0 
8 $:ffll>t7!)> K77>^ V^OOByte Sub^^^ 

(Byte Sub^^lHlSS) Byte SubSEtMflfStt, 8 t' jx h ¥ 

[ 0 1 1 8 ] B 1 0 l-^-TByte Sub^^05S 3 9 1 11, 
«*<kfflff^J«W[El»3 9 2 tu^ 3 9 3, ffiS 

^©(hjb 394, m^itm?rFm%\E\® 395, 

^ 3 9 6 K'M^Xt^c 

[0 119] tU^^ 3 9 3li x A^X-^^m^-fkffl 
'fT^I^^[ElB3 9 2<Dmt}frAt)£tlX&*)^-rtlt)>-- 
^^ffimmWlHlS§3 9 4ICA^-f 5«t 5lw»rta:ix-Clr> 
5^ 60 ^fc, 1?U*? 3 9 6li, iS^fiSlEl8§3 9 4<Offi 
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jikm^itm?fnmm\E\&3 9 5^ffl*#A*$ftT*$ 

[0120] Bf ^ft«FlCfl. tH^ 3 9 3 & AJlT- 

*fcfflffMMKlHl»3 9 2«|CU 3 9 6 

ft«KlilB3 9 4«lc-r$ 0 r©^tfcJ:9. 

^ 1 0 0 0 



Vo 



[0 12 3] m«rH8M-5t 



^1-&2tf>Jz5l;: 



2003-1 5522 
30 

fc:fc»t*Byte Sub£&&Jl<b, SByteSu 

[0 12 1] Bt*fc«FlC*J»t5fT^»»ft!f3lll, *<0J: 
[0 12 2] 

mi] 
i i o 
i i 1 

0 1 1 

0 0 1 

0 0 0 

1 0 0 
1 1 0 

1 1 1 

[0 12 4] 
[*2] 





+ 


f 0 


*i 




1 


"2 




0 


*3 




0 


«4 




0 


«5 




1 


«8 




1 


^ X 7, 

























+ 


X 4 


+ 


Xj 


+ 


x« 


+ 


*i 


+ 


1 








+ 
















+ 


X6 


+ 


x e 


+ 


x 7 


+ 


1 


y 2 






+ 


x 1 


+ 
















+ 


x. 


+ 


x. 












+ 


Xl 


+ 


X, 


■t- 


x 3 














+ 


X7 












+ 


Xl 


+ 


Xf 




X3 


+ 


X4 


















y s 










+ 




+ 


Xj 


+ 


X4 


+ 


x* 










+ 


1 


y« 












x* 


+ 


Xj 


+ 


X 4 


+ 


x« 


+ 


x* 






+ 


1 


V7 
















X3 


+ 


X 4 


+ 


Xs 


+ 


Xe 


+ 


X7 







[0125] ftwtmzisi'tzftmm&to-mi*. [0126] 



f y °l 




r 0 


0 1 0 0 1 0 r 




f O 


+ 


r n 


yi 




1 


0010010 




*l 




0 


y* 




0 


1001001 




x 2 




1 


ya 




1 


0100100 




x 3 




0 


y4 




0 


1010010 




X4 




0 


ys 




0 


0101001 




x 5 




0 


ye 




1 


0010100 




*e 




0 






I 0 


1 0 0 1 0 1 Q J 




c X 7j 







[0 12 7] rti«:RI»lc»H!i-6t, M:*t»4« 

[0 12 8] 
[ft4] 

y 2 = x, + x, 

y* = *t> + x 2 + 
y 4 = *i + X3 

ye = x 2 + x 4 

y 8 = xo + *3 + x B 

y 7 = x, + x 4 



+ Xs *■ x 7 

+ xe 

+ x 7 



+ 1 



+ 1 



[0129] i**ffcffltT0]*S@fcO-W£® 1 1 fc* 

i\ :: r-m, 8 t'y ho a* 401, &* U 

4 0 3i3j;Ol«Iftt§tT«^5^ 



B4 0 2Ao>Wft&ntt9ftillB^7t,. Sirr-Sag^ 
K'l 6ji(7)EX0Rt 4i^NOT^iS 
^W6: * id «fc «9 Star 5 r fc # nllE £ ft 6. 
[0130] **ffcffiff*]«»|§lfco-H*:B 1 2 {c^ 
-To *^kfflffWja»iHlBtra«^, 8 try h OA* u 
v?X* 4 0 5. tB*U^X* 4 0 7 tSXlftimfttmMfti 

■rsastoai^wfkrs^ km sii^ExoRiHiBt 2 
not &*&*£;b-fr s c t x-nm-tz z t#*imt 

[0131] Bt-tfkffltT^JSffislBwteoWSrBI 1 3 II 

1 x tB^l/i/xni4, S»ft«ffl^i/^^4 1 3*5 
5^ J:U?»j|feWttSlH]BT-»*S^^ttailB4 1 2*«^ 
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Tl^o A^U-v 5 ** 4 1 K tH*J I'v*** 4 1 4, S 
Mffll^^^ 4 1 3li x ^-fix^8 t'y h<7)*>;7 h 

hfo^Cn-r- hi/7 h1"6 0 

[0 1 3 2] ftl (0*jfl» 1^36*11, loG>fT#3 
otfTo't 5ooVeft!), 1 ofo->7 hi~5 J: 51- 
»J***L"Cl^£ 0 wix**^H XJllsV** 4 1 1 Ox0,x 

4, x5, x6, x7<D& t* h&o-x- V'sy h 

3HUK4 1 2fcA*LTEX0R«S«:Hfrr$w£-C\ ft 

[0 13 3] £ftRJ*fflU^X*4 1 3lC(i, T 

h*-fr4*se>»TtttTy hOtI$r8&^(HlK4 1 2l:A^3 

[0 13 4] irlCttj, A^U^^4 11li7 

rmtsisisx* 4 1 4 tt-So 
tt, yl*s«g£jft,Ttti;&U^**4 1 4fcfctt£ix, £A 
T«*»£*Qf3S:5!ff LT8 * Dyn* (y7, y6, y5, y4, 
y3,y2,yl,y0) (OSf^Tf5 0 - ©J&^tf>8&3i[ElK 
4 1 2tt5«^EX0R|eiBT-»2OS»teJl&£ffra;: 

[0135] ztibmmcmj&Ltzm^<kmrrfi\fo%® 

^0^4 1 6£flI;tT^6o A^u> ? ^^4 1 5 % tij 
#1^**4 1 8, £ft&#fflUi;**4 1 7tt, 1*-? 
ilt 8 t' y ^ ->7 h ^ ^Tib 4 !) , 

So 

[o 1 3 e] $k3<D%®mim<nj£mn. 10^5 

oco'O" £ 3o^ ¥ l^i|^Wt^^ 1 ofo->7 

4 1 5G0x2,x5,x7<D&tf y h&P-T^- h 
^<bB3HsIB4 1 6{CA^LTEX0R^^^r^tTi-5r fc 
T\ ft3^*i2^1^0fT^JSS^tT9 r fc*S-C#*. 
[0 13 7] £ft««fEU***4 1 T 

ttfcTy h^?>W^»3*ffl*2 3S<Z)5e»dS-fe J / h^t 
^60 Sft&ftfflt'^** 4 1 7CDfil^o-r- h->7 
h$t/^P>lTlit'y hOit£!&3I[eJ&§4 1 6 1:: Art 
LEX0R*»*rSHfir1-6ifc-e, ft 3 ££35 2 Jf(BfT0l« 

[0138] rcO ' let 9 , A^Uy^^4l5C7 

Tfflrt 1^**4 1 8(C&#j£ix£ 0 Wrf-ffcB**: 
iRjai-WftaSESQfaSrSlfTLrS^Dy^-C (y7, y6,y 

5, y4,y3,y2.yl,y0) cOS»*s^Ti"6 w Z^I&dcOtta 
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084 1 6l2 3<gOEX0R@8T'ft4<^g&3l£f|fT^ 

(ttBl) e^biS^I^p y^SWlStS 
hft(OSftooRound Key£±jSU Artx-* <b M 
lERound Key^^Olot EXORfiiig £ HfTlT 6 EXOR^ 
ggj5^. Byte Sub^&. Shift Row^&, Mix Column^ 
ft> Round Key^Dg^r^tfRound^S^liftlHlllfTi-^Ro 

undMiiai<h£<i;t6 7*> K7r vWcfc D 

Artx~? ^iftiERound Keyl^J:6«p^k/a^{b«l31 

Wf«ERoundtoaflS*S % A^x-^SrWiBtoaiyo y^S 

ftfriaSSfT^n y^*fe|ri(rlERound Key£>|££Art 
^-^ICiDgi-^mi Round KeyADSEIfcJ:. BiffE^ 1 R 
ound Key*Q||[EIBa)Ui**:-«Fttt*|fti-6^ttlCtt 
SEftia^o y^«lcJ:-6Shift RowJ6»*r*fT"f-6 + BB 
i/v^lfcshift RowSEft^K^. IBEfBli/^^ts 

hift Row«8l|5lR(OttAJ|»|Ej6fT5 r P!/^««tA*S 
ixByte Sub«*S:lt?Ti-5Byte Sub^&EK <b , HifiS* 
itf BBu^^^*Shift RowaE*IslB«)iSdSttfBlltfyny 
*ft«(CArtSixtfrfBRound Key^ttSrttfEStff^n y 
*S«fc*D*-r5*2Round KeyAnH[H]3g £ % HiJfS^ 2 R 
ound KeyjDgE&OttrtlCttLTMix Coluran^&£HfT 
-f£Mix Column2£»ll]»t, 1 ± U * * , *Pr8^ 

^^^^Shift Row^^lHl^, Byte Sub^m[H]^ x Mix C 
olunmS*|eIKoffl*(Z)5 *>^i"n*M o*«ftfE»2Rou 
nd Key*D*le]B^ttl^i-5»2"feU^^^Sr{|x.5-^ 

[0 13 9] (#IE2) MIE^fT^n y^Stt:8 0«» 
30 \fy h-efcSf+ffillClEttOlliP-^lElKo 

(f+IE3) MIS^JI^D y ^ftjftS 1 2 8 My hXhV. 
WiaHfT^n S/^ft*S3 2 h-C*>6f+iBl *fctt2 

[0 14 0] (f+E4) ffiieSfr^D8g*5l 2 8 Ify 
h, 192t'7K 2 5 6 Ify h<0? t>W-rtlt>*T?*> 

sf+ia i ~ 3 i^iSicoe&^-iHi^ 0 

[0141] (f+iE5) mriEByte SubSMHWd. A* 

ft^@^<b. WEaftSUa^bfflASixS^-^lcS 
- 4 CO ^ -f Jx lc |E« tf> « » Is] 5S 0 

[0 14 2] (tflB6) Misti^fbmft^ams&MG 
i*-»{fc:fT9»J«W«tt. 1 ^ o f y ho&g&fr 

5 -t 5 l-EX0REIB«:*l»LT^6WIE5lC|E*a)*#ia 

50 
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[0 14 3] (#12 7) ffiffi«*fcff*J«5«£«rffitt 
X 9 i^EX0R@&£&^ LTt^£ E5 KE^Bf^© 

Bo 

[0 14 4] (#E8) ffifE^Rau-v^^Shift Row 

IcE®<7>&£^[h]Bo 
[0 14 5] (ftE9) MEMix Column^&IDBfi, * 

[0146] (#12 1 0) iftEMix Column««Is]»(i, 
8 try h*ffi-e«**SBJte*4o«)**»^ifSE4o^ 

ORtnlB £ 4 o(i^6#fE 9 £Ett*>tt 

[0 14 7] (#E 1 1 ) mriB**»*s, 2 0(011?: 

[0 14 8] (#Ei 2) iffitrs/ h*» 

e»<7)*D8fl[SrW»1-5J:5Jc«^$^5, f+El IKE 
*0>*-i§-lElBo 

[0 14 9] (»E1 3) m^m&iftfcMft?* y*S 

iftrnmn? * v ? * & 7 * ?--r z>7 }) yzf7 

py^0BAS*RS«as*ttfc'>7 h i/^^h ME 

^3fe»«^5*,^e)5i«*tt-5 i o©£» 

Sft«S*r*fTf S» lEXOREB^ i!B*>7hI/^ 
*<D7V y77n*y7<Z>5hV6^<kmzm$tt&tf*Z> 

fcn-'r-v'a ytea-TSRot Byte&HlHJB irE* 
6ir U^Offl^iftERot Bytefti31ls]B^ffi*^dSA 

mE*7-bu^^(Offl*lc#LXlWEIifT^py^ 

E!B6i?U**<Dttlfl£fflESiib Byteto3l[5]B<Offl** s 

WESlEX0R|Hl8S<OtB^tME®8-t ^Otti 
* <b t«<5^rt)Mk»M»fll»*Slfii--6* 2 EXOR0 
iE->7 h U^***>7 y -^7 p y^(0^ t,PS 

ttU, «iESS2EX0RlH]Ktf)aja£, »t6"T6a<0 7 y 



(18) 4#§B2 003-15522 
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^70 y^om^^w^^^TixA^^RWicai^-r 

A^BrJt^toS^o y*ftlc*fr£1-<5 try hSt^I^ 
Round Key&ffiElltT^P try 

[U&£^r1-£ttE 1-12 (O^T ftj^lcEtt*)!*-*® 
Bo 

[0 15 0] (f+El 4) fl»E->7 h 3 2 

t'y hm&T-^-*&Jl£|£fT-f 6 8iStf>:7 y y^7P 

oy^5*)TH2ai, 4&@. 6^e, 8&@tf) 
7y^7Dy^itiMA^Jtl, tvffl^lotrtti 
*i"6J:5l-»J**ixrt^f+El 3icEit^et-§-[5l 

Bo 

[0151] (ftEl 5) flftE*7-fe U^^I^WE + BB 
i^x*«Shift Row«*|eIK<oUi*dSA*$tt, MES 
ub Byte^S[e]SS^tti^^B«rE^2^U^ ^ICA^Ji-^ 
rtlcj:t)> iftESub Byte^S^SS^MrERound^aia 
<7)Byte SubSEfiHaB^^^ffll-S, #E 1 3£fcttl 4 
^ KEtt<Ol*-i§r|l]fc 0 

[0 15 2] 

/uftSJ: 7 £ V Y7t >^ v£1$go[h]B<£> — as*: 

#*r<ki- £ r t r- $ s> icesss*** $ < 6 r * # *r 

[0 1] RijndaelT/l"=f y XAia^AE S(OM^o 
y*0, 

[0 2] Vzl-W?U?7 Ay X h 0 

[03] ®££ft6@B^S£<^£^-t^p y*0 o 
[04] **W^lH*«j8Jc«ffl$ix6 7^>K7 7 

[0 5] +rauv?**aishift RowXtftiHiteoyDy^ 

0o 

[0 6 ] Mix Column^^lHlB^^o y ^ 0 O 
^ [0 7] *i»OH»|J^t^n^H, 

[0 8] *»SOft©»ritt^ny^B. 
[09] i^y^a-/^(^yD^^i 0 
[0 10] Byte Sub^^HB^yo y ^0 O 

[0in m^itmrrvm&®&<D7v v*m 0 
[0i2] «#fkfflfT«»»iaii<05 r o-/^H. 

[0 13] «*fbfflff^]«»liIK(0(ft^fif!IS:^-*-^Dy 

*0c 

[014] iB^fbfflfT^I«8lH]B(Offi^WSr^i-yD y 

^0c 
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1 



10 



20 



x '---^ S 

' I AAui;^ I 




RoundK«yflPg | 37 



25 



[03] 



[04 ] 



CPU 




Coprocessor 


_50 
















✓ 52 



[06] 



f 7 [a«T 



202 i SEUA J itafttasa* 



eg 



207 I RoundX»yW l»- H AND J &*JI 

r^^l [ WxCoJn^»j»1^2t0 ^209 



J 



204 j RatwfltoyttyT ^- H AMD J — Jt*ft 



208 



im7\ 




374 
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[02] 



[0 10] 



l28bitor192blt 
KeyExpension { byte Key [ 4 ♦ Nk] word W [ Nb * < Nr ♦ 1 ) ] 



for(i = 0;i<Nk;K+) 

W[t]=(Key[4*i].Kay[4*i+1],Key[4*i + 3]); 
fcr<i = Nk;KNbe<Nr+1 );i+0 
I 

temp = W[i-1 J; 
if(iXNk = = 0) 

tamp = SubBytc ( Rotfiyte ( temp ))" Rcon [ i / Nk ] 
W[i]=W[i-Nk]*ta mP ; 

I 



M = = 256bit 

KeyExpansion ( byte Key[4*Nk] word W [ Nb * ( Nr + 1 >] 



for(i = 0;i<Nk;K+) 

W[l] = {Key[4*i].Key[4*i+1].Key[4*i + 3])- 
for(i = Nk;i<Nb*(l*+1 );■++) 

temp = W[i-1]; 
if (i H Nk = = 0) 

temp = SiAByte ( RotByte ( temp ) ) * Rcon [ i / Nk ] ; 
elseif(i%Nk = = 4) 

temp = SubByta ( temp ) ; 
W[i] = W[i-Nk]-temp; 



ft*** 



^392 



(Wt) ***** 



^1 



Miftotof A : 1 
sdectorB :2 



aelectorA:2 

1:1 
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[09 ] 



101 •« 



' 102*, 



\ Rcon— few 



103 



RCON.EN — 



-ANE 



104> 



EX 

VWKEY— lORt 



105 106 107 108 BSOUT ^ 



W5KEY — l_B 
W7KEY — 
W1KEV — 



BSIN 



131 - 



MINIM, 

i SELA | 

< 1 256bittD32bit 



132 



KYREQSEL 




' WOKEY 



KYREG 
SL 



II 1] 



112] 



401 



402' 



403' 



"7 


*e 




*4 


X 3 


*2 


X 1 


*0 



0 XOR 16@ 
[>o NOT 4J| 



U 1 


.111,. 




r 


y? ye ys y« 


y 3 vt 


*i y 0 



405- 



406- 



407- 



x 7 x e x 5 x 4 x 3 x 2 X, x 0 

mm 



1 1 



£f) XOR I3fl 
t» NOT 2<1 



y? 




ys 


*4 


y 3 




* 


y 0 



[113] 



411 



*7 



412 



SHIFT REGISTER 
x fl |x 5 |x 4 |x 3 |x" 



XOR 5ffl 



*o — ' + 01 



SHIFT REGISTER 



413 



y 5 



y* 



y 3 



Vo 



414 



SHIFT REGISTER 
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This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of the Official Record 



Defective images within this document are accurate representations of the original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 



□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□ LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCED) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 
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